Peter Steinberger c83dcc2bc0 fix(security): harden network tool output at canonical owner boundaries (#118984) ...

* fix(security): bound external tool content at its canonical owner boundary

* fix(plugin-sdk): document supported security boundary and restore facade parity

2026-08-03 15:34:33 -07:00

..

acpx

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

active-memory

fix(active-memory): detect Chinese recall intent in escalate mode (#117338) (#117419)

2026-08-01 09:21:45 -07:00

admin-http-rpc

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

alibaba

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

amazon-bedrock

fix(bedrock): preserve private embedding endpoints and AWS routing policy (#118744)

2026-08-03 10:39:02 -07:00

amazon-bedrock-mantle

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

anthropic

fix(anthropic): honor configured model pricing (#117275)

2026-08-01 09:56:23 -07:00

anthropic-vertex

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

arcee

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

azure-speech

fix(tts): reject non-audio speech synthesis responses (#117345)

2026-08-01 16:13:15 -07:00

baseten

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

beam

fix(beam): clip mirrored session text without splitting surrogate pairs (#117671)

2026-08-01 18:29:16 -07:00

bonjour

…

brave

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

browser

fix(browser): protect private observation media and Canvas trust boundaries (#118775)

2026-08-03 11:33:27 -07:00

buzz

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

byteplus

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

canvas

fix(browser): protect private observation media and Canvas trust boundaries (#118775)

2026-08-03 11:33:27 -07:00

cerebras

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

chutes

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

clawrouter

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

clickclack

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

cloudflare-ai-gateway

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

codex

fix(agents): preserve tainted memory provenance in provider tool bridges (#118760)

2026-08-03 10:12:10 -07:00

cohere

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

comfy

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

copilot

fix(agents): preserve tainted memory provenance in provider tool bridges (#118760)

2026-08-03 10:12:10 -07:00

copilot-proxy

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

crabbox

…

cua-computer

fix(plugins): unblock prerelease validation (#118103)

2026-08-03 04:48:05 +08:00

deepgram

fix(deepgram): preserve transcript integrity

2026-08-03 17:56:45 +08:00

deepinfra

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

deepseek

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

device-pair

test(device-pair): consolidate pairing coverage (#118079)

2026-08-02 11:09:53 -07:00

diagnostics-otel

fix(config): reject unsupported diagnostics otel grpc (#93087)

2026-08-03 16:28:08 -04:00

diagnostics-prometheus

test(qa): cover Prometheus install and runtime export (#118867)

2026-08-04 05:38:23 +08:00

diffs

fix(diffs): restore Windows browser discovery roots (#111257)

2026-08-04 00:22:24 +08:00

diffs-language-pack

…

discord

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

document-extract

fix(pdf): reject requested pages outside the document range (#118639)

2026-08-03 04:28:17 -07:00

duckduckgo

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

elevenlabs

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

exa

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

fal

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

featherless

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

feishu

fix(feishu): enforce exact signed webhook request boundaries (#118758)

2026-08-03 14:52:58 -07:00

file-transfer

fix(file-transfer): keep fetched media attachable in sandboxed replies (#116400)

2026-07-31 20:09:28 +08:00

firecrawl

fix(security): harden network tool output at canonical owner boundaries (#118984)

2026-08-03 15:34:33 -07:00

fireworks

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

fish-audio

feat: add Fish Audio S2.1 and local MLX speech (#115790)

2026-07-29 05:15:33 -04:00

github-copilot

refactor(auth): move Copilot OAuth ownership to plugin (#118063)

2026-08-02 10:59:28 -07:00

gmi

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

google

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

google-meet

test(channels): consolidate remaining channel scaffolding (#118493)

2026-08-02 23:03:54 -07:00

googlechat

fix(googlechat): align doctor policy ownership with canonical account configuration (#118972)

2026-08-03 15:23:16 -07:00

gradium

fix(tts): reject non-audio speech synthesis responses (#117345)

2026-08-01 16:13:15 -07:00

groq

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

huggingface

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

image-generation-core

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

imessage

fix(imessage): deduplicate only configured watchers with canonical backend identity (#118974)

2026-08-03 14:37:27 -07:00

inworld

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

irc

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

kilocode

fix(kilocode): model discovery overstates the usable context window (#118868)

2026-08-03 15:44:46 -05:00

kimi-coding

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

line

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

linux-canvas

fix(linux-canvas): report socket watcher fallback (#109502)

2026-08-01 00:36:15 -07:00

linux-node

…

litellm

fix(litellm): send image edits as multipart/form-data (#118562)

2026-08-03 02:59:08 -07:00

llama-cpp

test(llama-cpp): consolidate provider fixtures (#118426)

2026-08-02 20:59:50 -07:00

llm-task

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

lmstudio

fix(lmstudio): resolve JIT embedding variants

2026-08-04 02:11:26 +08:00

lobster

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

logbook

fix(logbook): honor canonical gateway.nodes.commands.deny kill switch (#117803)

2026-08-01 21:36:05 -07:00

longcat

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

matrix

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

mattermost

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

media-understanding-core

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

memory-core

test(qa): add memory redaction boundary coverage (#118916)

2026-08-04 04:46:10 +08:00

memory-lancedb

fix(memory): isolate LanceDB embedding credentials per agent lifecycle (#118767)

2026-08-03 10:00:08 -07:00

memory-wiki

test(memory): isolate wiki plugin fixtures (#118654)

2026-08-03 05:26:59 -07:00

meta

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

microsoft

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

microsoft-foundry

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

migrate-claude

…

migrate-hermes

refactor(migrate-hermes): consolidate test fixtures (#118182)

2026-08-02 14:01:45 -07:00

minimax

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

mistral

test(ci): stabilize plugin prerelease async waits (#117684)

2026-08-02 07:31:34 +08:00

moonshot

fix(moonshot): forward abort signal through Kimi web search provider (#105125)

2026-08-01 13:01:40 -07:00

msteams

fix(msteams): enforce documented AAD owner approval principals (#118967)

2026-08-03 14:24:30 -07:00

mxc

chore(lint): clear 172 lint:all baseline violations in five batches (#118098)

2026-08-02 14:08:09 -07:00

nextcloud-talk

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

nostr

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

novita

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

nvidia

fix(nvidia): hide retired models while preserving live vendor discovery (#117620)

2026-08-02 04:40:17 -07:00

oc-path

…

ollama

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

onepassword

refactor(plugins): consolidate extension runtime helpers (#118509)

2026-08-03 02:56:43 -07:00

open-prose

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

openai

fix(openai): enforce final transcript bounds before callback delivery (#118928)

2026-08-03 13:56:21 -07:00

opencode

refactor(opencode): consolidate session catalog test fixtures (#118323)

2026-08-02 20:33:42 -07:00

opencode-go

test(opencode-go): consolidate stream termination harness (#118317)

2026-08-02 19:34:57 -07:00

openrouter

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

openshell

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

parallel

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

perplexity

fix(search): propagate cancellation through provider-owned requests (#118895)

2026-08-03 12:46:17 -07:00

pixverse

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

policy

test(policy): centralize CLI fixtures (#118439)

2026-08-02 21:11:54 -07:00

qa-channel

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

qa-lab

test(qa): prove plugin tool ownership in gateway flow (#118958)

2026-08-04 05:05:44 +08:00

qianfan

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

qqbot

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

qwen

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

raft

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

reef

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

runway

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

searxng

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

senseaudio

test(extensions): move live audio checks out of unit suites (#116651)

2026-07-31 12:15:03 +08:00

sglang

refactor(providers): consolidate sibling adapters (#117822)

2026-08-01 22:10:06 -07:00

signal

fix(signal): drain accepted websocket messages before shutdown (#118975)

2026-08-03 14:58:13 -07:00

slack

refactor: delete dead post-landing plugin/hooks scaffolding (#118920)

2026-08-04 04:26:22 +08:00

sms

feat(sms): add Twilio MMS support (#118664)

2026-08-04 05:46:37 +08:00

stepfun

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

synology-chat

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

synthetic

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

talk-voice

…

tavily

fix(security): harden network tool output at canonical owner boundaries (#118984)

2026-08-03 15:34:33 -07:00

teams-meetings

test(teams-meetings): consolidate transport fixtures (#118090)

2026-08-02 11:10:01 -07:00

telegram

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

tencent

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

test-support

…

thread-ownership

…

tlon

feat: enable rich setup controls in custodian chat (#114631)

2026-08-03 22:18:27 +10:00

together

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

tokenjuice

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

tts-local-cli

test(extensions): move live audio checks out of unit suites (#116651)

2026-07-31 12:15:03 +08:00

twitch

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

vault

refactor(plugins): consolidate extension runtime helpers (#118509)

2026-08-03 02:56:43 -07:00

venice

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

vercel-ai-gateway

refactor(providers): consolidate catalog setup helpers (#117824)

2026-08-01 22:17:52 -07:00

video-generation-core

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

vllm

refactor(providers): consolidate sibling adapters (#117822)

2026-08-01 22:10:06 -07:00

voice-call

fix(voice): make signed callback replay reservations durable and retryable (#118754)

2026-08-03 10:35:32 -07:00

volcengine

refactor(providers): consolidate sibling adapters (#117822)

2026-08-01 22:10:06 -07:00

voyage

fix(voyage): keep embedding batch waits within timeout (#111673)

2026-08-01 15:02:33 -07:00

vydra

fix(providers): recognize configured media credentials across provider boundaries (#118761)

2026-08-03 13:26:31 -07:00

web-readability

…

webhooks

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

whatsapp

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

workboard

fix(workboard): diagnose archived cards still in an active status (#116359) (#117290)

2026-08-02 07:30:52 -07:00

xai

fix(security): harden network tool output at canonical owner boundaries (#118984)

2026-08-03 15:34:33 -07:00

xiaomi

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

zai

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

zalo

feat(sms): add Twilio MMS support (#118664)

2026-08-04 05:46:37 +08:00

zalouser

refactor(channels): own the lifecycle status contract in SDK patch factories (#118795)

2026-08-03 12:39:48 -07:00

zoom-meetings

refactor(zoom-meetings): consolidate runtime fixtures (#118300)

2026-08-02 17:13:56 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

tsconfig.package-boundary.paths.json

fix(memory): keep wiki search inside protected recall visibility (#118265)

2026-08-02 18:22:17 -07:00

video-generation-providers.live.test.ts

…